CVE-2023-5947

creationtimestamp| type| source ---|---|--- 2024-02-27 16:26:16+00:00| seen| https://t.me/ctinow/194570 2024-02-27 16:32:16+00:00| seen| https://t.me/ctinow/194579...

K64571774: BIG-IP virtual server TCP sequence numbers vulnerability CVE-2020-5947

Security Advisory Description On specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers. CVE-2020-5947 Impact Attackers may be able to spoof TCP packet...

Security Bulletin: IBM SPSS SamplePower vsflex7l ActiveX control vulnerability (CVE-2012-5947)

Abstract There is a security vulnerability with the vsflex7l ActiveX control shipped by IBM SPSS SamplePower Version 3. The vulnerability allows remote attackers to execute arbitrary code on installations of SamplePower when the control is invoked as ActiveX by Microsoft Internet Explorer. Conten...

CVE-2020-5947

creationtimestamp| type| source ---|---|--- 2020-11-19 07:40:59+00:00| seen| https://t.me/cibsecurity/16569...

CVE-2020-5947

In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers. Only these platforms are affected: BIG-IP 200...

CVE-2020-5947

This CVE affects BIG-IP platforms (2000, 4000, i2000, i4000, and VE). The vulnerable component is TCP sequence handling in BIG-IP virtual server code, with root cause described as a design/logic flaw that allows attackers to obtain and reuse TCP sequence numbers. Affected versions include 16.0.0–...

CVE-2020-5947

In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers. Only these platforms are affected: BIG-IP 200...

F5 Networks BIG-IP : BIG-IP virtual server TCP sequence numbers vulnerability (K64571774)

On specific BIG-IP platforms, attackersmay be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers.CVE-2020-5947 Impact Attackers may be able to spoof TCP packets to be used by a future...

CVE-2019-5947

creationtimestamp| type| source ---|---|--- 2019-05-17 16:51:33+00:00| seen| https://t.me/cvemitreorg/42...

CVE-2019-5947

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'...

CVE-2019-5947

CVE-2019-5947 is an XSS vulnerability in Cybozu Garoon (versions 4.6.0–4.10.1) exploitable via the Cabinet component. The issue allows an authenticated remote attacker to inject arbitrary script/HTML, potentially leading to arbitrary script execution in a user’s browser. Public sources (NVD, Red ...

CVE-2017-5947

The CVE-2017-5947 issue affects OnePlus devices (OnePlus One, X, 2, 3, 3T, 5) running OxygenOS 5.0 and earlier. The root cause is the ability to force a reboot into Qualcomm Emergency Download (EDL) mode via ADB or Volume-Up when USB is connected, which can enable downgrading critical partitions ...

Race condition

Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5947...

CVE-2015-5947

SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code...

CVE-2015-5947

SuiteCRM before 7.2.3 is affected by CVE-2015-5947, which allows remote attackers to execute arbitrary code. The connected documents flag this as a remote-code-execution vulnerability in SuiteCRM prior to 7.2.3, with follow-up notes indicating a related race-condition (CVE-2015-5948) that exists ...

CVE-2016-5947

IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2016-5947

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 is affected by a clickjacking vulnerability that can be exploited by a remote, authenticated user via a crafted web site. The issue affects IBM Spectrum Control / Tivoli Storage Productivity Center 5.2.8–5.2.10...

jobs.net XSS vulnerability

Vulnerable URL: http://www.jobs.net/?SiteID='" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5947 VIP website status:| Yes Check jobs.net SSL connection:| Grade: F Coordinated Disclosure Timeline: Description|...

CVE-2014-5947

CVE-2014-5947 affects the Android app psicofxp (also known as com.tapatalk.psicofxpcom), version 2.4.12.15, which fails to verify X.509 certificates from SSL servers. The underlying issue is certificate validation being bypassed, enabling man-in-the-middle attackers to spoof servers and capture s...

IBM SPSS SamplePower 3.0 < 3.0 FP 1 Multiple ActiveX Controls Arbitrary Code Execution

The remote install of IBM SPSS SamplePower has a vulnerable version of one or more ActiveX controls installed. 'Vsflex8l.ocx', 'c1sizer.ocx', 'vsflex7l .ocx', and 'olch2x32.ocx' ActiveX controls have unspecified arbitrary code execution vulnerabilities, which can be exploited by tricking a user...